PT-2023-31408 · Nextbx · Nextbx Qwalerter

Phx · Publicado 2023-09-15 · Atualizado 2024-05-17 · CVE-2023-4991

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NextBX QWAlerter version 4.50

Description A critical issue was found in the software, affecting some unknown functionality of the file QWAlerter.exe. The manipulation leads to an unquoted search path, allowing an attack to be launched on the local host.

Recommendations For NextBX QWAlerter version 4.50, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2023-4991

Produtos afetados

Nextbx Qwalerter

Referências · 4

• https://vuldb.com/?ctiid.239804 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-4991 · Nota de Segurança
• https://vuldb.com/?id.239804 · Nota
• https://osv.dev/vulnerability/CVE-2023-4991 · Aviso do Fabricante